watching custom resources with a namespace scope

[ChrisSchreiber]

Using the deployment-notifier.js example works but if I change

const stream = client.apis['kubernetes-client.io'].v1.watch.deploymentnotifiers.getStream()

to

const stream = client.apis['kubernetes-client.io'].v1.namespaces('default').watch.deploymentnotifiers.getStream()

the script returns immediately without any output.

Trying to do the same thing in another project with a CRD named toolchain which has a service account with a role which only allows access to that resource I get the following response.

{
  "kind": "Status",
   "apiVersion": "v1",
   "metadata": {},
   "status": "Failure",
   "message": "watch.stable.liatr.io \"toolchains\" is forbidden: User \"system:serviceaccount:toolchain:operator-slack\" cannot get resource \"watch\" in API group \"stable.liatr.io\" in the namespace \"toolchain\"",
   "reason": "Forbidden",
   "details": {
     "name": "toolchains",
     "group": "stable.liatr.io",
     "kind": "watch"
   },
   "code": 403
 }

If I add a resource named watch to my role I do not get any response at all so my guess is that the client is sending "watch" instead of the resource name to the Kubernetes API.